What is the CVSS score of CVE-2026-32037?

CVE-2026-32037 has a CVSS 3.1 base score of 6.0 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L. EPSS exploitation probability: 0.0%.

Which versions of Openclaw are affected by CVE-2026-32037?

CVE-2026-32037 presents moderate security risk, a server-side request forgery vulnerability rated CVSS 6.0. Users could be tricked into performing unintended actions.. A patch is available.

How to fix or mitigate CVE-2026-32037?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Openclaw CVE-2026-32037

MEDIUM

Server-Side Request Forgery (SSRF) (CWE-918)

2026-03-19 disclosure@vulncheck.com

GHSA-w76h-8m22-hpgh

SSRF Openclaw

6.0

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.0 MEDIUM

AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

Low

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

Analysis Generated

Mar 19, 2026 - 22:30 vuln.today

CVE Published

Mar 19, 2026 - 22:16 nvd

MEDIUM 6.0

DescriptionCVE.org

OpenClaw versions prior to 2026.2.22 fail to consistently validate redirect chains against configured mediaAllowHosts allowlists during MSTeams media downloads. Attackers can supply or influence attachment URLs to force redirects to non-allowlisted targets, bypassing SSRF boundary controls.

AnalysisAI

OpenClaw versions prior to 2026.2.22 contain a Server-Side Request Forgery (SSRF) vulnerability in MSTeams media attachment handling where redirect chain validation against the mediaAllowHosts allowlist is inconsistently applied. An authenticated attacker with low privileges can supply or influence attachment URLs that redirect to non-allowlisted targets, allowing them to bypass SSRF boundary controls and potentially access internal resources. The vulnerability has confirmed patch availability and security advisories from the vendor.

Technical ContextAI

The vulnerability exists in OpenClaw's URL validation logic for MSTeams media downloads, specifically in the handling of HTTP redirect chains. The root cause is classified as CWE-918 (Server-Side Request Forgery), which occurs when an application fetches remote resources without proper validation of all intermediate destinations in a redirect chain. OpenClaw's mediaAllowHosts configuration is intended to restrict which external hosts can be contacted during attachment processing, but the implementation fails to validate each redirect hop against this allowlist. An attacker can craft a URL pointing to an allowlisted host that redirects (via HTTP 301, 302, or similar status codes) to an internal or non-allowlisted target, allowing the application to make requests to restricted destinations. This is a classic open-redirect-to-SSRF chain exploitation technique.

RemediationAI

Immediately upgrade OpenClaw to version 2026.2.22 or later, which includes fixes to consistently validate redirect chains against the mediaAllowHosts allowlist (see GitHub commits 73d93dee and b34097f62df). Until patching is feasible, implement network-level mitigations by restricting outbound connections from OpenClaw instances to a whitelist of necessary external hosts and blocking redirects to private IP ranges (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, 127.0.0.1/8, ::1/128) at the firewall or proxy level. Additionally, review mediaAllowHosts configuration to ensure it reflects the principle of least privilege. Consider deploying an egress proxy with redirect-blocking rules to further constrain SSRF attack surface. Refer to the VulnCheck and GitHub security advisory URLs for vendor-specific guidance.